$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vuW2rDJyjlb5yRl8ItbqQw1kOhI.roa File: vuW2rDJyjlb5yRl8ItbqQw1kOhI.roa (raw, json) Hash identifier: KYyOKAUcywhbrXQSWPcTf2vQCCCU51yi89pfRaGY9K0= Subject key identifier: BE:E5:B6:AC:32:72:8E:56:F9:C9:19:7C:22:D6:EA:43:0D:64:3A:12 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A88 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vuW2rDJyjlb5yRl8ItbqQw1kOhI.roa Signing time: Fri 22 Aug 2025 08:47:28 +0000 ROA not before: Fri 22 Aug 2025 08:47:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 2407:4d00:ff07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14984 (0x3a88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BEE5B6AC32728E56F9C9197C22D6EA430D643A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:49:57:80:f7:75:26:3e:33:84:1f:7e:c3: 80:dc:f2:aa:39:15:cd:cf:cb:70:b3:ae:7b:59:1b: d4:c1:e8:77:7e:b6:3b:d3:ce:34:17:82:88:d8:97: 7f:74:71:e3:9c:04:94:71:f8:72:0b:db:28:6e:77: e1:fb:b6:42:97:f9:8c:20:4e:15:7f:96:1d:f2:fa: 85:22:8a:16:67:7e:10:0c:02:22:6c:57:19:44:0b: 93:9c:b9:5a:02:64:a8:4b:c2:80:2f:a4:90:77:5c: 01:df:20:a7:92:b6:53:b3:eb:45:dd:f6:49:18:15: 0d:ac:6d:50:2f:b0:30:4f:52:5d:84:9c:0c:2c:03: c8:28:c0:58:f5:a4:ca:b9:79:cc:45:b9:bb:06:9a: 71:37:ff:55:b9:15:b3:00:45:70:ca:35:e4:e6:f8: 48:27:3f:84:de:55:40:73:4e:a9:20:70:21:26:dd: 1f:27:7f:38:ce:ea:be:39:cd:20:44:5a:68:e9:68: a8:b1:d4:18:2d:38:8a:0c:19:50:11:f9:c9:49:97: 27:54:71:fb:c4:4f:2e:5b:ca:15:a7:41:5f:61:cb: 53:ea:62:b1:5f:a2:63:08:58:fd:0c:6c:89:55:a4: 27:35:d4:8d:3f:aa:99:f7:0e:1b:13:51:6d:ba:f4: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E5:B6:AC:32:72:8E:56:F9:C9:19:7C:22:D6:EA:43:0D:64:3A:12 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vuW2rDJyjlb5yRl8ItbqQw1kOhI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff07::/48 Signature Algorithm: sha256WithRSAEncryption 4f:a9:7d:99:ec:cd:52:9e:2f:8d:f3:0e:81:9c:2c:70:c8:2a: b1:9e:92:58:a8:2d:06:3a:c9:9f:fc:f4:b9:aa:2c:35:f9:d9: b6:94:88:fc:24:b8:39:f6:aa:e0:b7:4f:92:7b:80:81:08:4e: ac:80:68:dc:bd:45:2a:ed:cc:f6:10:b9:1b:61:f5:d4:b9:d5: 90:11:6b:7a:45:1a:fe:58:3e:9a:8b:9d:49:ce:1c:41:7d:16: 74:f3:b4:9e:65:d9:48:b4:0d:31:1f:90:5b:9c:8d:9d:c3:49: cb:0c:e3:f9:42:7d:95:08:49:af:ea:7a:61:c8:76:de:94:4d: 8e:f9:c5:52:3b:6e:0f:a9:73:8d:64:4a:d8:fe:78:62:59:58: a4:7c:92:ca:4f:6a:33:ab:4c:e3:20:f2:98:09:fc:26:e5:d6: 01:f2:14:19:0f:63:2f:5d:08:eb:d0:bc:48:3d:16:ca:37:97: 35:49:b4:da:8c:2c:46:9c:15:3f:cc:03:c9:b7:3e:75:25:c5: 70:37:91:8d:e9:87:e0:ec:2a:04:ed:5a:80:7d:4b:6a:3d:8f: 05:bf:8b:7c:d6:c4:ca:e9:ba:00:23:ff:45:78:b8:c5:f6:42: 1d:62:a1:74:4d:67:f9:cc:31:75:14:f8:8b:44:30:02:eb:7a: f0:1f:ca:20 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICOogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJFRTVCNkFDMzI3MjhF NTZGOUM5MTk3QzIyRDZFQTQzMEQ2NDNBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC88klXgPd1Jj4zhB9+w4Dc8qo5Fc3Py3CzrntZG9TB6Hd+tjvT zjQXgojYl390ceOcBJRx+HIL2yhud+H7tkKX+YwgThV/lh3y+oUiihZnfhAMAiJs VxlEC5OcuVoCZKhLwoAvpJB3XAHfIKeStlOz60Xd9kkYFQ2sbVAvsDBPUl2EnAws A8gowFj1pMq5ecxFubsGmnE3/1W5FbMARXDKNeTm+EgnP4TeVUBzTqkgcCEm3R8n fzjO6r45zSBEWmjpaKix1BgtOIoMGVAR+clJlydUcfvETy5byhWnQV9hy1PqYrFf omMIWP0MbIlVpCc11I0/qpn3DhsTUW269Fn5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvuW2rDJyjlb5yRl8ItbqQw1kOhIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Z1VzJyREp5amxiNXlSbDhJ dGJxUXcxa09oSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wcwDQYJKoZIhvcNAQELBQADggEBAE+pfZnszVKeL43zDoGcLHDIKrGeklio LQY6yZ/89LmqLDX52baUiPwkuDn2quC3T5J7gIEITqyAaNy9RSrtzPYQuRth9dS5 1ZARa3pFGv5YPpqLnUnOHEF9FnTztJ5l2Ui0DTEfkFucjZ3DScsM4/lCfZUISa/q emHIdt6UTY75xVI7bg+pc41kStj+eGJZWKR8kspPajOrTOMg8pgJ/Cbl1gHyFBkP Yy9dCOvQvEg9Fso3lzVJtNqMLEacFT/MA8m3PnUlxXA3kY3ph+DsKgTtWoB9S2o9 jwW/i3zWxMrpugAj/0V4uMX2Qh1ioXRNZ/nMMXUU+ItEMALrevAfyiA= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:17 2025 by rpki-client